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New York, Sep. 18th, 1935 



Bear Friedmans 



Since I last wrote you I have put in some more time on the ADFGVX 
Cipher, and have come upon some points in the "general Solution" which seem to 
me. to require more light before I oan satisfy myself that this is indeed a 
general solution* 

I certainly have no desire to discount the pretty solution of the mes- 
sages given. If I mention or intimate the existence of luok in the solution, 
it is nox that I wish to disparage luck in connection vri.th cryptography. Oil 
the contrary, I know from experience how to value it; and I am convinced that 
a cryptographer can no more {fet along without it than a physician. - And 
now to mjr points* 

j 

Any! solution of the ADFGVX System must depend on a determination of 
l) the number of columns in the transposition rectangle, and 2) the number 
of letters in each column* 

j * 

The assumption that the material at hand for this purpose will include 
12 messages written in the same key is a perfectly fair one, based, no doubt, 
on actual war-time experience* Is it equally fair to assume that 2 of these 
12 messages will contain the same number of letters? Even in the 12 messages 
given the variation in the number of letters per message is considerable - the 
shortest has 108 letters and the longest 254} still two of them oontain 186 
letters, wd this fact plays a prominent part in the solution, increasing as 
it does the material on which the opening steps are based* 

The principle of "Reversals" is, of course, basic in the solution, and is 
sure to b:e of service when circumstances allow* I think it would have been 
well to point out that these reversals will appear only (a) if the first of 
two columns has an odd number of letters and the second is, of the same kind 
(i. e. + or -) as the first; or (b) if the first of two columns has an even 
number ofj letters and the second is of a different kind from’ the -first* To 
state the ( some thing negatively: if the first of two columns has an even 
number of; letters and the second is of the same kind as the first - or if 
the first; has an odd number of letters and the second is of a different kind 
from the ^irst, there will be no reversal as between these columns* Roughly, 
and without actually calculating the probability, this a fifty-fifty chance* 

The test ijnessages begin with '6 columns each containing an odd number of 
letters, and that is a piece of good fortune which the solvers very proper- 
ly used to good advantage - but it is a piece of good fortune none the less, 
and its recurrence cannot be counted on* 

S 

Suppose col 4 had follovred col I (I am using the col numbers of the trans- 
posed text; , i.e. as the message was sent); the first two sets of ten letters 
would then show 



1st ten 

even 
A 6 



2nd ten 
even 
A 1 



Mth weights according to Kigs 
1 and 2 of the text, these figure: 
1st ten, odd-even 148, even-odd 104 
2nd ten, odd-even 196, even-odd 176 



There is no reversal 
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How let col 5 follow col 4, not forgetting that two letters of ool 4 remain to 
be used. ' The third set of ten will now shows 

3rd ten 

odd even 

3 A 2 , 

4 D . 4 

2 F 0 odd-even 148 , even-odd 123. . 

0 G 2 

1 VI: Again there is no reversal. ’’ 

0X1 

The further along we go, the more the sfets of ten are bastardised. Thus, 51-60 
contains ! 5 letters from each of two columns, and any work put on such a set of 
letters could, of course, yield valid results only through the arrival of San- 
ta Glaus. _ • _ 

The jopening analysis shows that the seoond set of ten letters is preponder- 
antly of a different nature from the first. Why sets of just ten were chosen is 
not stated - of which more a bit later. The conclusion is drawn that there is. 
a reversal "near the tenth letter." Then we read, "This same sort of reversal 
takes plaice in the -tV.'i’fdi ten, but this time the break is definitely indicated. 

The simultaneous appearance of V and X in the sequent positions 22 and 23 indi- 
cates that 22 is the end of one column and 23 the beginning of another." It 
is true that a foot-note points out that the point is not absolute, and is merely 
"an indication based upon probabilities." This remark belongs not in a foot-note 
but in tne text proper so that it may receive due consideration. As a matter of 
fact it receives no consideration whatever: from this moment on the column length 
of 11 letters is assumed to have been proved. The way was paved for this conclu- 
sion in the italicized statement on page 3: " A reversal of this alternation i n- 
dicates t)>~ end of* one column and the beginn i ng of another . ,f I cannot oonvince 
myself thjat the Id-letter column lengtK has really beeh'pYovecl at all. 







l-'i 1 



In itself the simultaneous appearance of V and X in positions 22 and 23- 
proves little or nothing - at most it may arouse a suspicion. In the two mes- 
sages undpr consideration the phenomenon appears 6 times - at 14-15, 22-23, 

44-45, 67-68, 120-121 and 179-180. Three of these occurrences mark column di- 
visions and three do not - surely there is no strong indication in that, 
i 

Possibly the text means to say that vhen, for other reasons, there is a sus- 
picion of! break, then and then only the phenomenon may indicate the point of the 
break. Eben that is, I think, too strong an assertion; and in this connection I. t 
point back to what X said above as to the test based on two sets of ten letters 
each. 

I 

Why just ten letters? It seers to me that a cryptanalyst examining the two 
messages, j especially one vho is ready to be im->ressed by the VX recurrence might 
more readily have chosen 14 jthan 10 beoause the same phenomenon occurs there, cie 
would then apply his odd-andeven tests to the first and second sets of 14 with the 
following result: 







1st 14 

even 
A 6 
D I 
F 3 
a 3 
V 1 
'X ' 0 



2nd 14 

odd even 

1 A 0 

2 D 5 

4 E 3 

3 G 2 

1 V 1 

3X3 



These shov. by w .righted frequencies, , 
1st 14, odd-even 196, even-odd 157 
2nd 14, odd-even 191, even-odd 197 



i 

l 

I 

We should have a rectangle with 9 columns of 14 letters and 4 of 15. We may con- 
sider the .second column one of 14 letters with a reversal (not very strong) or 
one of 15 ^odd-even 208, even-odd 197) without a reversal. In the' latter case 
the second column (no reversal after a column with an even number of letters) 
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■would be of -the same kind (say +) as the first. — The would-be solver would be 
up a tree'. But so I believe %vould the actual solvers of the messages except 
for a piece of luck: they noted the VX repetition at 22-25 and drew conclusions 
which seep to me not warranted, and these conclusions proved correct. Our hy- 
pothetical solver drew conclusions little if any less warranted and came out 
wrong: one man's meat and another man's poison! 

i 

I find myself unable to agree with the argument on page 5 demonstrating that 
all the fjirst five columns are long: "Employing the same reasoning as before, 
it is quijte evident that there is a break between 56 and 56." The break between 
22 and 23' was assumed mainly because of the VX phenomenon there; nothing of that 
kind ocoujrs here. The only other previous reasoning that can apply is that 
brought to bear on the first twenty letters (page 4, top). The conclusion drawn 
there is ;that "this reversal would indicate that column 1 of- the transposition 
rectangle 1 * ends somewhere near the tenth letter." How can the evidence here be 
said to p|oint to more than a break in the neighborhood of 55 - to a break at 
exactly 5|s? The point is important, because from this conclusion that there is 
a break at 55 is drawn the further very weighty conclusion that the first five 
columns are all long. Suppose we examine the matter a little further. 

Let us assome the correctness of the conclusion that there is a break at 
22, and that columns 1 and 2 contain each 11 lette.rs and are + columns. Let 
us now arbitrarily suppose that column 3 contains 10 letters and is the short 
column of| the message. Column 4 and all subsequent columns' will then be long. 

1 see nothing at this point - nothing indeed short of the actual correct ar- 
rangement' of the columns - to contradict this assumption; following the text, 
columns a and 6 ( letter s45 - 55 and 56-66) compare as follows: 



> - i col 6 
odd even 
4 ' A 3 
4 . D 0 

0 F 3 
2 i G 4 

1 ' V 0 
1 , X 0 



col 6 

odd even 
0 A 3 

5 D 3 

0 F 3 

2 G 1 

5 7 0 

0X0 



Weighted Free acc'g to Figs 1 and 2: 
col 5, odd-even 154, even-odd 121 
col 6, odd-even 206, even-odd 139 



On the assumption that A is a short column, col 5 would contain letters 44-54 and 
col 6 letters 55-65, showing 



I 

; col 5 

odd even 
3 A 4 

2 D 4 

3 F 0 

4 G 1 

0 . V 1 

Oxo 



col 6 

odd even 
3 A 0 

3 D 4 

3 F 0 

2 G 1 

0 V 5 

1X0 



Weighted Freq as before: 

col 5, odd-even 137, even-odd 160 

col 6, odd-even 138, even-odd 189 



Both 5 and 6 are now minus where they were plus before; but what is there at this 
stage to 'show that this is wrong? 

i 

* l'he t e rm 1 ' trans position rectangle" seems to be used in two contradictory senses. 
Here, and! in the third line below figure 4 (page 5) it means the rectangle after 
transposition has taken place; 6 lines above the bottom of page 6, on the other 
hand, it p.eans the rectangle containing the message before transposition - or 1 
so understand it. 



*> * 



REF 4 ID: A99873 . 



The conclusion tha . the f a rst 5 columns are long is vital to the reasoning 
of page 6, which places column '2 in the original transposition rectangle. And 
even then the column is placed through the presence in the twelve messages of 
a message] with one additional short column - a n«w piece of good fortune to 
add to those already mentioned. 

I 

1 shall b9 much interested to hear what the message solvers say on these 
points - and glad to be corrected where I am wrong. 



Cordially yours 
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